{"id":3461,"date":"2017-04-23T21:23:54","date_gmt":"2017-04-23T17:23:54","guid":{"rendered":"https:\/\/rakhesh.com\/?p=3461"},"modified":"2017-04-23T21:24:07","modified_gmt":"2017-04-23T17:24:07","slug":"refresher-to-myself-storefront-and-delivery-controller-authentication","status":"publish","type":"post","link":"https:\/\/rakhesh.com\/citrix\/refresher-to-myself-storefront-and-delivery-controller-authentication\/","title":{"rendered":"Refresher to myself StoreFront and Delivery Controller authentication"},"content":{"rendered":"

In a previous post<\/a> I had written about the flow of communication between Citrix Storefront and Delivery Controllers during user authentication. Here’s some more based on a Citrix blog post<\/a> I am reading.\u00a0<\/p>\n

Here’s what I had written in my previous post:<\/p>\n

\n

There\u2019s a couple of steps that happens when a user logs in to access a Citrix solution. First: the StoreFront authenticates the user against AD. Or if the user is accessing remotely, the NetScaler gateway authenticates the user and passes on details to the StoreFront. Then the StoreFront passes on this information to the Delivery Controller<\/strong> so the latter can give a list of resources the user has access to. The Delivery Controllers in turn authenticate the user AD. The Delivery Controller then sends a list of resources the user has access to, to the StoreFront, which sends this on to the user\u2019s Citrix Receiver or Browser. This is when the user sees what is available to them, and can select what they want.<\/p>\n

When the user selects what they want, this is information is passed on to the StoreFront, which then passes the info to the Delivery Controller<\/strong> \u2013 who then finds an appropriate host that\u00a0can fulfill the requirement and sends this information to the StoreFront.\u00a0<\/p>\n<\/blockquote>\n

Emphasis mine. The Storefront communicates with the Delivery Controller using the XML Service.\u00a0<\/p>\n

Here’s a list of authentication methods supported by the Storefront.\u00a0<\/p>\n

\"\"<\/p>\n

When the Storefront communicates the user authentication information to the Delivery Controller, it may or may not include the password too (sent in clear-text<\/em>) in this communication. If “User name and password” or “Pass-through from NetScaler” is selected, then the password is included. If “Domain pass-through” or “Smart card” is selected, then the password is not. The blog post<\/a> doesn’t say anything about these, but I think “SAML Authentication” (used for ADFS<\/a>) will not include the password, while “HTTP Basic” will.\u00a0<\/p>\n

The StoreFront and Delivery Controller communicates twice (the two times I emphasized above). The first time is when the user authenticates and the StoreFront sends this information to the Delivery Controller to get a list of resources. The second time is when the user makes a selection and this information is passed on to the Delivery Controller so that an appropriate host can be selected. In both instances the password could be sent from the StoreFront to the Delivery Controller.<\/p>\n","protected":false},"excerpt":{"rendered":"

In a previous post I had written about the flow of communication between Citrix Storefront and Delivery Controllers during user authentication. Here’s some more based on a Citrix blog post I am reading.\u00a0 Here’s what I had written in my previous post: There\u2019s a couple of steps that happens when a user logs in to … Continue reading Refresher to myself StoreFront and Delivery Controller authentication<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[657],"tags":[182,655,647,656],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts\/3461"}],"collection":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/comments?post=3461"}],"version-history":[{"count":0,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts\/3461\/revisions"}],"wp:attachment":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/media?parent=3461"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/categories?post=3461"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/tags?post=3461"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}